Precursor

A precursor is an observable occurrence or sign that an attacker may be preparing to cause an incident. Related Term: Indicator Source: CNSSI 4009, NIST SP 800-61 Rev 2